facing an issue Failed to create field <event_timestamp> -

[earun46]

Hi ,

I am trying to setup SiLK . Solr is up .

While setting up , logstash from the instructions provided by lucidworks, i get below error.
a**** bin]$ ./logstash --configtest -f lw_solr.conf

The error reported is:
Failed to create field <event_timestamp> -

Not Found

[athana]

you have to look inside lw_solr.conf, specifically, at grok regex pattern and see if your log file contains the matching event_timestamp field. This error could mean that your log does not match the regex.

[godfrey-obinchu]

Am running into this as well. Does anyone have an update?